Skip to content
Today
Sections

Security Independently confirmed4 publishers 3 min read Published Updated

CISA's seven new KEV entries put SonicWall gateways and Artifactory on one patch clock

SonicWall's CVSS 10.0 SSRF chains into command execution on remote access appliances, and JFrog Artifactory hands unauthenticated attackers admin under default configuration. Reverse shells and miners are already landing.

The Watch · Security desk

Send a correction

What happened

  • CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog on Wednesday, spanning SonicWall SMA 1000 appliances, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS and Berri LiteLLM.
  • Microsoft reported that CVE-2026-49869 in Kestra OSS was likely exploited in late June 2026 to establish a reverse shell, survey the Docker environment, deploy a cryptocurrency miner and harvest data.
  • SonicWall's fixes are the 12.4.3-03526 and 12.5.0-02952 platform hotfixes, with models 6210, 7210 and 8200v on earlier builds of either branch affected.

Why it matters

  • Who's exposed exposure An Artifactory instance in its default configuration hands network-reachable attackers administrative control, which puts the repository feeding every downstream build in the same emergency window as the perimeter VPN.
  • What it limits constraint Queueing this batch by CVSS pushes the two bugs that actually complete the chains to the bottom of the list, so severity ranking cannot drive the remediation order here.
  • Who has to decide decision SonicWall's own remediation path converts any positive IoC hit into a rebuild plus full user, administrator and TOTP credential rotation, which is an incident budget rather than a maintenance window.
  • What it sets up precedent Four exploited SMA 1000 zero-days across two disclosure cycles since July sets the expectation that this appliance line will be hunted again, and that owners should plan hotfix capacity accordingly.

The chain is two steps. CVE-2026-83548 is a pre-authentication SSRF in the SMA 1000 Appliance Work Place interface, the component normally exposed directly to the internet in a standard deployment [1][28]. CVE-2026-83549 is OS command injection in the Appliance Management Console, and on its own it requires an authenticated administrator plus specific system conditions [6]. Rapid7's read is that the SSRF supplies the reach the command injection lacks, producing unauthenticated remote code execution on the device that makes access decisions for an entire remote workforce [2].

That is where score-sorting stops working. Two of the seven additions carry a 10.0, the SonicWall SSRF and the Kestra OSS command injection [32][15]. The two lowest scores in the batch, the 6.5 in Kludex Starlette and the 7.8 in the SMA 1000, are both the second half of a working chain [31]. Horizon3.ai reported in June 2026 that the Starlette smuggling flaw can be chained with LiteLLM's CVE-2026-42271, itself an 8.7, to bypass authentication and reach code execution [20]. Wiz has linked Qilin, also tracked as Agenda, to exploitation of that pair [22].

The Artifactory entry is the one that changes build pipeline planning. CVE-2026-82329 gives an unauthenticated attacker with network access administrative privileges under default configuration [12]. Horizon3.ai and watchTowr report unknown actors pairing it with the Sangoma Switchvox SQL injection, which needs one crafted request, to drop reverse shells and mint admin tokens, then enumerate users, groups, credential sets and federated access topologies [14][13]. Minting tokens and mapping trust relationships is staging work for a later intrusion.

Microsoft's Kestra case is the fullest tradecraft picture in the set: shell execution through the workflow engine, container exposure through Docker socket access, host resource hijacking via miner deployment, and follow-on collection through workflow task execution [17]. One detail matters for hunting. The later curl-pipe-shell activity encoded collected output and stored it through Kestra's own key-value interface, cutting the standalone file artifacts a responder would normally look for [18]. On LiteLLM, the same reporting has attackers fingerprinting the host, terminating competing miners, delivering XMRig as an ELF binary, and reusing previously collected database credentials against LiteLLM tables including LiteLLM_ProxyModelTable [25][26].

Public and dated: SonicWall's September 1 disclosure, its confirmation of exploitation, and the fixed builds [3][8]. Unattributed: as of Rapid7's September 2 write-up there was no public proof of concept, no indicators of compromise, and no attribution for the current activity [4]. UTA0533 was the actor named for the July SMA 1000 pair, CVE-2026-15409 and CVE-2026-15410, which deployed KNUCKLEBALL and which CISA tied to ransomware crews in August [10][11]. Same product line, no established link to this month's activity. Rapid7's own vulnerability checks were expected in the September 3 content release, one day after it told customers the bugs were being exploited [27][33].

What to watch

  • A public proof of concept for CVE-2026-83548 would move SMA 1000 exploitation from one investigated case to broad opportunistic scanning.
  • Attribution for the current SMA 1000 activity: if UTA0533 is behind it, the July KNUCKLEBALL tooling is the hunting baseline.
  • Whether Artifactory exploitation moves past minted admin tokens into tampering with stored artifacts consumed by downstream builds.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence70
Adoption
Not scored
Hype gap+10
Incentives35
Confidence68

Perspective Coverage

4 publishers
Builder
Builder 14%
Operator
Operator 72%
Investor
Investor 14%
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    CVE-2026-83548 is a pre-authentication server-side request forgery vulnerability in the SonicWall SMA 1000 Appliance Work Place interface with a CVSS v3.1 base score of 10.0, allowing a remote unauthenticated attacker to access sensitive functionality through an unintended alternate access path.

    Reported SupportedView cited source
  2. [2]

    Rapid7 states that CVE-2026-83548 and CVE-2026-83549 can be chained to achieve unauthenticated remote code execution on affected SMA 1000 appliances, with the SSRF allowing exploitation of the command injection without prior authentication.

    Reported SupportedView cited source
  3. [3]

    On September 1, 2026, SonicWall disclosed the two SMA 1000 vulnerabilities and said it investigated a case indicating active exploitation of them.

    Reported SupportedView cited source
  4. [4]

    Rapid7 said that as of its publication no public proof-of-concept exploit, indicators of compromise, or attribution for the current SMA 1000 activity were identified in available research; the post was initially published September 2, 2026.

    Reported SupportedView cited source
  5. [5]

    CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities catalog after they came under attack, covering SonicWall SMA 1000 appliances, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS and Berri LiteLLM.

    Reported SupportedView cited source
  6. [6]

    CVE-2026-83549 is a high-severity OS command injection flaw in the SMA 1000 Appliance Management Console with a CVSS score of 7.8; on its own, exploitation requires an authenticated administrator and specific system conditions.

    Reported SupportedView cited source
  7. [7]

    The flaws affect SMA 1000 models 6210, 7210 and 8200v running version 12.4.3-03453 platform-hotfix and earlier, or 12.5.0-02835 platform-hotfix and earlier.

    Reported SupportedView cited source
  8. [8]

    SonicWall released fixes in versions 12.4.3-03526 platform-hotfix and 12.5.0-02952 platform-hotfix.

    Reported SupportedView cited source
  9. [9]

    SonicWall recommends upgrading to the latest hotfix, reviewing systems for indicators of compromise, and if IoCs are found, re-imaging or re-deploying the appliances, changing all user and administrator passwords, and resetting TOTP tokens.

    Reported SupportedView cited source
  10. [10]

    SonicWall shipped fixes for two other SMA 1000 flaws, CVE-2026-15409 (CVSS 10.0) and CVE-2026-15410 (CVSS 7.2), more than a month earlier; those were exploited by a threat actor dubbed UTA0533 to deploy KNUCKLEBALL malware.

    Reported SupportedView cited source
  11. [11]

    In August, CISA confirmed that the two July SMA 1000 CVEs were being abused by ransomware gangs.

    Reported SupportedView cited source
  12. [12]

    CVE-2026-82329 (CVSS 9.8) is an improper authentication vulnerability in JFrog Artifactory that under default configuration could allow an unauthenticated attacker with network access to obtain administrative privileges.

    Reported SupportedView cited source
  13. [13]

    CVE-2026-9586 (CVSS 9.3) is an SQL injection flaw in Sangoma Switchvox allowing an unauthenticated remote attacker to execute arbitrary SQL against the backend PostgreSQL database with a single crafted request, including remote code execution.

    Reported SupportedView cited source
  14. [14]

    According to reports from Horizon3.ai and watchTowr, unknown threat actors have been observed weaponizing CVE-2026-9586 and CVE-2026-82329 to deploy reverse shells and minted admin tokens for follow-on enumeration of users, groups, credential sets and federated access topologies.

    Reported SupportedView cited source
  15. [15]

    CVE-2026-49869 (CVSS 10.0) is an OS command injection vulnerability in Kestra OSS allowing an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.

    Reported SupportedView cited source
  16. [16]

    The KEV addition of CVE-2026-49869 was driven by a Microsoft report stating the flaw was likely exploited by a threat actor in late June 2026 to establish a reverse shell, conduct Docker container environment discovery, perform defense evasion, deploy a cryptocurrency miner and facilitate data harvesting.

    Reported SupportedView cited source
  17. [17]

    Microsoft said the Kestra compromise exposed four impact paths: shell execution through the workflow engine, container-environment exposure through Docker socket access, host resource hijacking through miner deployment, and follow-on collection through workflow task execution.

    Reported SupportedView cited source
  18. [18]

    Microsoft said the later curl-pipe-shell event encoded collected output and stored it through Kestra's own key-value interface, reducing reliance on standalone file artifacts.

    Reported SupportedView cited source
  19. [19]

    CVE-2026-48710 (CVSS 6.5) is an HTTP request/response smuggling vulnerability in Kludex Starlette allowing attackers to inject paths into the host part, leading to authentication bypass where authentication depends on the reconstructed URL path.

    Reported SupportedView cited source
  20. [20]

    A Horizon3.ai report in June 2026 revealed CVE-2026-48710 could be chained with Berri LiteLLM flaw CVE-2026-42271 (CVSS 8.7) to bypass authentication and achieve remote code execution against vulnerable LiteLLM deployments.

    Reported SupportedView cited source
  21. [21]

    CVE-2026-42271 was added to CISA's KEV catalog around the same time as the seven other flaws.

    Reported SupportedView cited source
  22. [22]

    Per Google-owned Wiz, threat actors associated with the Qilin (aka Agenda) ransomware have been linked to active exploitation of the CVE-2026-42271 chain.

    Reported SupportedView cited source
  23. [23]

    CVE-2026-59822 (CVSS 8.8) is an improper authentication flaw in Berri LiteLLM's Model Context Protocol Streamable HTTP endpoint allowing an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.

    Reported SupportedView cited source
  24. [24]

    Wiz said it observed exploitation efforts involving CVE-2026-59822 against its honeypots to probe model enumeration endpoints.

    Reported SupportedView cited source
  25. [25]

    Microsoft revealed that actors are breaking into LiteLLM gateways using CVE-2026-42271 and CVE-2026-48710 to deliver an XMRig miner via an ELF binary, after fingerprinting the host and terminating competing mining processes.

    Reported SupportedView cited source
  26. [26]

    Attackers were found abusing previously collected database information to access the LiteLLM-backed PostgreSQL data tier and target LiteLLM tables including LiteLLM_ProxyModelTable.

    Reported SupportedView cited source
  27. [27]

    Rapid7 said Exposure Command, InsightVM and Nexpose customers could assess exposure to CVE-2026-83548 and CVE-2026-83549 with vulnerability checks expected in the September 3rd content release.

    Reported SupportedView cited source
  28. [28]

    SonicWall SMA1000 appliances are enterprise secure remote access gateways, and their Work Place interfaces may be exposed directly to the internet as part of normal deployment.

    Reported SupportedView cited source
  29. [29]

    BreachLock CEO Seemant Sehgal said organizations running SMA1000 should treat this as an active compromise scenario until they have patched, reviewed logs for the indicators SonicWall published, and confirmed no lateral movement has occurred.

    Reported SupportedView cited source
  30. [30]

    SonicWall has now patched four exploited SMA 1000 zero-days across two disclosure cycles, the July pair and the September 1 pair.

    Derived Supported
  31. [31]

    The two lowest-scored flaws in the batch, CVE-2026-48710 at 6.5 and CVE-2026-83549 at 7.8, are both the second stage of documented exploitation chains.

    Derived Supported
  32. [32]

    Two of the seven newly added flaws carry a CVSS score of 10.0: the SonicWall SMA 1000 SSRF and the Kestra OSS command injection.

    Derived Supported
  33. [33]

    Rapid7's scan checks for the two SonicWall CVEs were due one day after it published confirmation of in-the-wild exploitation.

    Derived Supported
  34. [34]

    Counting CVE-2026-42271, eight CVEs were added to the KEV catalog in this round.

    Derived Contested

Sources

4 independent publishers whose own reporting we read for this story.

  1. blog.rapid7.com

    1 article · September 2, 2026

    Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
  2. cisa.gov

    1 article · September 2, 2026

    CISA Adds Seven Known Exploited Vulnerabilities to Catalog
  3. scworld.com

    1 article · September 2, 2026

    SonicWall advises customers to patch two new SMA1000 zero-days
  4. thehackernews.com

    2 articles · September 2, 2026

    Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

Topics and entities

Topics

Entities